SELinuxProject / selint

Static code analysis of refpolicy style SELinux policy
Apache License 2.0
38 stars 17 forks source link

Document recommendations on how to use SELint while violating normal conventions #279

Open dburgener opened 10 months ago

dburgener commented 10 months ago

https://github.com/SELinuxProject/selint/pull/250/commits/6fbb752ccc985c2c105630265e8e5be2dd88edfc Is adding a README section documenting some of the heuristics SELint uses to infer policy developer intent. A helpful augmentation of this would be to document recommendations for if a policy developer wants to violate those conventions while still using SELint (eg "disable such and such check", or "update the config in such and such a way")